Privacy Policy
This Privacy Policy describes how Magisoft EOOD ("we", "us", "our") collects, uses, and protects information when you use the KetoCakeLab mobile application (the "App") and the website ketocakelab.com (the "Site").
Data controller:
Magisoft EOOD
UIC (ЕИК): 104682072 · VAT: BG104682072
bl. 40A, entr. B, 20 Samokov St., 1113 Sofia, Bulgaria
Contact: support@ketocakelab.com
1. The short version
- The current version of the App does not require an account. We do not ask for your name, email, or password to use the App.
- We do not show third-party ads, do not sell your data, and do not track you across other companies' apps or websites.
- Payment is processed entirely by Apple. We never see your card details.
- Your pantry and shopping list live only on your device.
- We collect a small set of anonymous usage and purchase data to run and improve the App, as described below.
2. Information we collect
a) Information you create in the App
- Custom recipes you build (recipe name, selected components, servings, and an optional photo you choose to attach) are stored on our servers so the App can display them to you. In the current version this content is stored anonymously — it is not linked to a name, email, or account.
- Pantry items and shopping list entries are stored locally on your device only and are not transmitted to our servers.
- Inputs you type into on-device tools (e.g., the macro calculator, unit converter, timers) are processed on your device and are not collected by us.
b) Purchase information
If you purchase a Lab Membership subscription, the transaction is processed by Apple. We and our subscription-management provider (RevenueCat) receive purchase metadata needed to unlock your membership: an anonymous app identifier, product identifier, purchase and expiry dates, and subscription status. We never receive your payment card details, billing address, or Apple ID password.
c) Usage analytics
We collect anonymous in-app events (for example: which screens are opened, which features are used, whether a cooking session was completed, and a technical event if a screenshot is taken in Cooking Mode — the event only; never the screenshot itself or your screen content). These events help us understand which features are useful. They are not linked to your identity.
d) Technical data
Like most apps, basic technical information (device model, OS version, app version, language, crash information) may be processed to keep the App working correctly.
e) On the Site
If you voluntarily join our email list on the Site, we collect your email address via our email provider (MailerLite) and use it only to send you the content you signed up for. Every email contains an unsubscribe link.
3. What we do NOT collect
- No account credentials (current version has no login).
- No precise location, contacts, microphone, or health/fitness data (we do not read from or write to Apple Health).
- No payment card details.
- No advertising identifiers; we do not use the App Tracking Transparency framework because we do not track you across apps or websites.
4. How we use information
- To provide App functionality (display your creations, unlock your membership, sync published recipe content).
- To process and honor subscriptions, trials, and offer codes.
- To understand feature usage and improve the App.
- To provide support when you contact us.
- To comply with legal obligations.
Legal bases under the GDPR: performance of a contract (providing the App and your subscription), our legitimate interest (anonymous analytics, service integrity, fraud prevention), your consent (email list on the Site), and legal obligation (tax and accounting records).
5. Who processes data on our behalf
We use a small number of service providers ("processors") to operate the App:
| Provider | Purpose |
|---|---|
| Apple | App distribution, payment processing, subscription management |
| RevenueCat | Subscription status validation and management |
| Supabase | Hosting of our database and content infrastructure |
| Expo | App build and delivery tooling |
| Vercel | Hosting of the Site and our admin infrastructure |
| MailerLite | Email list (Site only, with your consent) |
The Site and App may contain outbound links (for example, equipment links to Amazon as part of the Amazon Associates program). Once you leave the App or Site, the destination's own privacy policy applies. We earn a commission on qualifying Amazon purchases; this does not change your price.
We do not sell personal data and do not share it with third parties for their own marketing.
6. Data retention
- Anonymous usage events and purchase metadata are retained for as long as needed for the purposes above.
- Custom recipe content remains stored until deleted from within the App (deleting the App from your device removes local data such as pantry and shopping list).
- Email addresses on the Site list are retained until you unsubscribe.
- Accounting records are retained as required by Bulgarian law.
7. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, and the right to lodge a complaint with a supervisory authority (in Bulgaria: the Commission for Personal Data Protection, cpdp.bg).
Important note on anonymous data: because the current version of the App does not use accounts, most data we hold is not linked to your identity, and we may be technically unable to associate specific stored records with you. Where this is the case, certain rights (such as access or erasure of specific records) may not be fulfillable, as permitted by Article 11 GDPR. You can always delete on-device data by deleting the App.
To exercise your rights, contact support@ketocakelab.com.
8. Children
The App is not directed at children, and we do not knowingly collect personal data from children. The App's content (recipes) is suitable for general audiences.
9. International transfers
Our providers may process data in the EU and/or the United States. Where data leaves the EEA, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework, as applicable to each provider.
10. Changes to this policy
We may update this policy as the App evolves (for example, when optional accounts are introduced). The current version will always be available at ketocakelab.com/privacy, with its effective date at the top. Material changes will be communicated in the App or by email where appropriate.
11. Contact
Magisoft EOOD · bl. 40A, entr. B, 20 Samokov St., 1113 Sofia, Bulgaria · support@ketocakelab.com